@yansigit/opencodex 2.36.1-dev.20260829.48 → 2.36.1

package/src/cli/account-main.ts

@@ -190,8 +190,8 @@ export async function cmdNativeMainAccount(args: string[], deps: AccountDeps): P
     if (args.length > 0 || confirmed || rollback) return reject(args);
     const path = sub === "doctor" ? "/api/native-main-profiles/doctor" : "/api/native-main-profiles";
     const result = await apiJson(deps, baseUrl, "GET", path);
-    if (result.status === 0) return proxyUnreachable();
-    if (result.status !== 200) return apiError(result.json, `failed to ${sub} native profiles`);
+    if (result.status === 0) return proxyUnreachable(result.transportError);
+    if (result.status !== 200) return apiError(result.json, `failed to ${sub} native profiles`, result.status);
     if (wantsJson || sub === "doctor") console.log(JSON.stringify(result.json, null, 2));
     else printProfiles(Array.isArray(result.json.profiles) ? result.json.profiles as PublicProfile[] : []);
     return 0;
@@ -201,8 +201,8 @@ export async function cmdNativeMainAccount(args: string[], deps: AccountDeps): P
     const label = args.shift();
     if (!label || args.length > 0 || confirmed || rollback) return reject(args);
     const result = await apiJson(deps, baseUrl, "POST", "/api/native-main-profiles/register", { label });
-    if (result.status === 0) return proxyUnreachable();
-    if (result.status !== 200) return apiError(result.json, "failed to register the current native login");
+    if (result.status === 0) return proxyUnreachable(result.transportError);
+    if (result.status !== 200) return apiError(result.json, "failed to register the current native login", result.status);
     if (wantsJson) console.log(JSON.stringify(result.json, null, 2));
     else console.log(`Registered '${label}' for ${effectiveCodexHome(result.json)}.`);
     return 0;
@@ -212,8 +212,8 @@ export async function cmdNativeMainAccount(args: string[], deps: AccountDeps): P
     const label = args.shift();
     if (!label || args.length > 0 || wantsJson || confirmed || rollback) return reject(args);
     const stage = await apiJson(deps, baseUrl, "POST", "/api/native-main-profiles/stage", {});
-    if (stage.status === 0) return proxyUnreachable();
-    if (stage.status !== 200) return apiError(stage.json, "failed to prepare native login staging");
+    if (stage.status === 0) return proxyUnreachable(stage.transportError);
+    if (stage.status !== 200) return apiError(stage.json, "failed to prepare native login staging", stage.status);
     const stageId = typeof stage.json.stageId === "string" ? stage.json.stageId : "";
     const writerToken = typeof stage.json.writerToken === "string" ? stage.json.writerToken : "";
     const stagingHome = typeof stage.json.stagingCodexHome === "string" ? stage.json.stagingCodexHome : "";
@@ -258,8 +258,8 @@ export async function cmdNativeMainAccount(args: string[], deps: AccountDeps): P
       if (leaseLost) throw new Error("The native-login staging lease was lost before login completed.");
       if (exitCode !== 0) throw new Error("Official Codex login did not complete successfully.");
       const finish = await apiJson(deps, baseUrl, "POST", "/api/native-main-profiles/stage/finish", { stageId, writerToken, label });
-      if (finish.status === 0) return proxyUnreachable();
-      if (finish.status !== 200) return apiError(finish.json, "failed to encrypt the staged native login");
+      if (finish.status === 0) return proxyUnreachable(finish.transportError);
+      if (finish.status !== 200) return apiError(finish.json, "failed to encrypt the staged native login", finish.status);
       finished = true;
       console.log(`Added encrypted native profile '${label}' for ${effectiveCodexHome(finish.json)}.`);
       return 0;
@@ -283,8 +283,8 @@ export async function cmdNativeMainAccount(args: string[], deps: AccountDeps): P
       return reject(args);
     }
     const result = await apiJson(deps, baseUrl, "POST", "/api/native-main-profiles/switch", { target, confirmedStopped: true });
-    if (result.status === 0) return proxyUnreachable();
-    if (result.status !== 200) return apiError(result.json, "failed to switch the native login");
+    if (result.status === 0) return proxyUnreachable(result.transportError);
+    if (result.status !== 200) return apiError(result.json, "failed to switch the native login", result.status);
     if (wantsJson) console.log(JSON.stringify(result.json, null, 2));
     else {
       const profile = result.json.activeProfile as PublicProfile | undefined;
@@ -301,8 +301,8 @@ export async function cmdNativeMainAccount(args: string[], deps: AccountDeps): P
     const result = await apiJson(deps, baseUrl, "POST", "/api/native-main-profiles/recover", rollback
       ? { rollback: true, confirmedStopped: true }
       : { rollback: false });
-    if (result.status === 0) return proxyUnreachable();
-    if (result.status !== 200) return apiError(result.json, "failed to recover the native-profile transaction");
+    if (result.status === 0) return proxyUnreachable(result.transportError);
+    if (result.status !== 200) return apiError(result.json, "failed to recover the native-profile transaction", result.status);
     if (wantsJson) console.log(JSON.stringify(result.json, null, 2));
     else {
       const home = effectiveCodexHome(result.json);

package/src/cli/account.ts

@@ -2,7 +2,20 @@
 import { loadConfig } from "../config";
 import { providerCodexAccountMode } from "../providers/registry";
 import type { OcxConfig } from "../types";
-import { cmdAddKey, cmdAlias, cmdAutoSwitch, cmdClearCooldown, cmdImport, cmdPriority, cmdRefresh, cmdRemove } from "./account-extended";
+import {
+  cmdAddKey,
+  cmdAlias,
+  cmdAutoSwitch,
+  cmdClearCooldown,
+  cmdImport,
+  cmdPause,
+  cmdPauseExhausted,
+  cmdPriority,
+  cmdRefresh,
+  cmdRemove,
+  cmdSticky,
+  cmdStrategy,
+} from "./account-extended";
 import { apiError, apiJson, classifyAccount, fetchRows, proxyUnreachable, resolveBaseUrl, type AccountDeps, type AccountRow, type AccountType, type ApiResult }
   from "./account-api";
 
@@ -23,6 +36,11 @@ const ACCOUNT_USAGE = `Usage:
   ocx account auto-switch <provider> <on|off|status|threshold <0-100>> [--json]
   ocx account alias <provider> <account-or-key-id> <display-name|-> [--json]
   ocx account priority <provider> <account-id|main> [<-100..100|first|earlier|normal|later|last|reset>] [--json]
+  ocx account pause <provider> <account-id|main> [--json]
+  ocx account resume <provider> <account-id|main> [--json]
+  ocx account pause-exhausted <provider> [--json]
+  ocx account strategy <provider> [<quota|round-robin|fill-first>] [--json]
+  ocx account sticky <provider> [<1-100>] [--json]
   ocx account remove <provider> <account-or-key-id|main> --yes [--json]
   ocx account clear-cooldown <provider> <account-id|main> [--json]
   ocx account add-key <provider> [--label <label>] [--json]
@@ -64,6 +82,10 @@ function displayId(id: string): string {
 
 function statusText(row: AccountRow): string {
   const parts: string[] = [];
+  // `paused` leads, and does NOT replace `selected`. A paused-but-selected account is the
+  // state an operator most needs named -- requests route to it while the pool believes it is
+  // held out -- so printing only one of the two would hide exactly the confusing case (#2703).
+  if (row.paused) parts.push("paused");
   if (row.active) parts.push(row.type === "codex" ? "selected" : "active");
   if (row.needsReauth) parts.push("needs-reauth");
   return parts.join(" ");
@@ -150,8 +172,8 @@ async function cmdList(rest: string[], deps: AccountDeps): Promise<number> {
     };
     push("openai", "codex");
     const providersRes = await apiJson(deps, baseUrl, "GET", "/api/oauth/providers");
-    if (providersRes.status === 0) return proxyUnreachable();
-    if (providersRes.status !== 200) return apiError(providersRes.json, "failed to list OAuth providers");
+    if (providersRes.status === 0) return proxyUnreachable(providersRes.transportError);
+    if (providersRes.status !== 200) return apiError(providersRes.json, "failed to list OAuth providers", providersRes.status);
     if (Array.isArray(providersRes.json.providers)) {
       for (const p of providersRes.json.providers) {
         if (typeof p === "string") push(p, "live-oauth-list");
@@ -164,9 +186,10 @@ async function cmdList(rest: string[], deps: AccountDeps): Promise<number> {
   const notes: string[] = [];
   for (const t of targets) {
     const r = await fetchRows(deps, baseUrl, t.name, t.type, wantsQuota ? { refresh: refreshQuota } : undefined);
-    if (r.networkDown) return proxyUnreachable();
+    if (r.networkDown) return proxyUnreachable(r.transportError);
     if (r.errorJson) {
-      if (name) return apiError(r.errorJson, `failed to list ${t.name}`);
+      if (name) return apiError(r.errorJson, `failed to list ${t.name}`, r.status);
+
       const errorText = typeof r.errorJson.error === "string" ? r.errorJson.error : "";
       const skipUnknownKey = t.type === "api-key"
         && r.status === 404
@@ -176,7 +199,7 @@ async function cmdList(rest: string[], deps: AccountDeps): Promise<number> {
         && r.status === 400
         && errorText.includes("unknown oauth provider");
       if (skipUnknownKey || skipConfigOAuth) continue;
-      return apiError(r.errorJson, `failed to list ${t.name}`);
+      return apiError(r.errorJson, `failed to list ${t.name}`, r.status);
     }
     if (r.rows.length === 0) {
       if (showAll) notes.push(`${t.name}: no stored accounts or keys`);
@@ -222,8 +245,8 @@ async function cmdCurrent(rest: string[], deps: AccountDeps): Promise<number> {
   const baseUrl = await resolveBaseUrl(deps);
   if (!baseUrl) return proxyUnreachable();
   const r = await fetchRows(deps, baseUrl, name, c.type);
-  if (r.networkDown) return proxyUnreachable();
-  if (r.errorJson) return apiError(r.errorJson, `failed to read ${name}`);
+  if (r.networkDown) return proxyUnreachable(r.transportError);
+  if (r.errorJson) return apiError(r.errorJson, `failed to read ${name}`, r.status);
 
   const activeRow = r.rows.find(row => row.active) ?? null;
   if (wantsJson) {
@@ -277,8 +300,8 @@ async function cmdUse(rest: string[], deps: AccountDeps): Promise<number> {
     activeId = id;
     res = await apiJson(deps, baseUrl, "PUT", "/api/providers/keys/active", { name, id });
   }
-  if (res.status === 0) return proxyUnreachable();
-  if (res.status !== 200) return apiError(res.json, `failed to switch ${name}`);
+  if (res.status === 0) return proxyUnreachable(res.transportError);
+  if (res.status !== 200) return apiError(res.json, `failed to switch ${name}`, res.status);
 
   if (wantsJson) console.log(JSON.stringify({ ok: true, provider: name, type: c.type, activeId }, null, 2));
   else console.log(`${name}: active ${c.type === "api-key" ? "key" : "account"} is now ${displayId(activeId)}`);
@@ -302,6 +325,13 @@ export async function cmdAccount(args: string[], deps: AccountDeps = {}): Promis
     if (sub === "auto-switch") return await cmdAutoSwitch(rest, deps);
     if (sub === "alias" || sub === "rename") return await cmdAlias(rest, deps);
     if (sub === "priority") return await cmdPriority(rest, deps);
+    // #2702: the server routes existed and only the CLI caller was missing, so these were
+    // dashboard-only capabilities.
+    if (sub === "pause") return await cmdPause(rest, deps, true);
+    if (sub === "resume") return await cmdPause(rest, deps, false);
+    if (sub === "pause-exhausted") return await cmdPauseExhausted(rest, deps);
+    if (sub === "strategy") return await cmdStrategy(rest, deps);
+    if (sub === "sticky") return await cmdSticky(rest, deps);
     if (sub === "remove") return await cmdRemove(rest, deps);
     if (sub === "clear-cooldown") return await cmdClearCooldown(rest, deps);
     if (sub === "add-key") return await cmdAddKey(rest, deps);

package/src/cli/agent.ts

@@ -32,7 +32,8 @@ const USAGE = `Usage:
   ocx agent fallback <status|set|clear> [model,model...] [--poll-ms <5000-600000>] [--json]
   ocx agent sidecar <status|web|vision> [--list] [--model <id|->]
       [--backend web:<openai|anthropic|xai|gemini|exa|-> vision:<openai|anthropic|routed|->]
-      [--reasoning <level>] [--max-descriptions <n>] [--json]`;
+      [--reasoning <level>] [--max-descriptions <n>] [--json]
+  ocx agent request-user-input [on|off] [--json]`;
 
 function clearable(value: string | undefined): string | null | undefined {
   return value === "-" ? null : value;
@@ -300,6 +301,12 @@ export async function handleAgentCommand(argv: string[], deps: RuntimeApiDeps =
     else if (sub === "roles") await roles(rest, deps);
     else if (sub === "fallback") await fallback(rest, deps);
     else if (sub === "sidecar") await sidecar(rest, deps);
+    // Lives here rather than as a top-level verb because it is an agent-behavior feature flag:
+    // it controls whether default mode may ask the operator a question mid-task.
+    else if (sub === "request-user-input") {
+      const { requestUserInputAction } = await import("./inspect");
+      await requestUserInputAction(rest, deps);
+    }
     else throw new CliUsageError(`unknown agent command ${sub}`, USAGE);
   });
 }

package/src/cli/capabilities-command.ts

@@ -0,0 +1,94 @@
+/**
+ * `ocx capabilities` -- the surface index an agent reads first.
+ *
+ * The point of this verb is that driving `ocx` programmatically should not require
+ * parsing help text. `--json` emits the capability table with the management routes each
+ * capability drives; `--route` answers the inverse question.
+ */
+import {
+  CAPABILITIES,
+  HEAD_CAPABILITIES,
+  capabilitiesForRoute,
+  capabilityInvocation,
+  type Capability,
+} from "./capabilities";
+import { takeFlag } from "./runtime-api";
+
+function takeValueFlag(args: string[], flag: string): string | undefined {
+  // Order-independent by construction: scan for the flag anywhere in argv rather than
+  // reading a fixed position. Positional flag handling is exactly why
+  // `ocx restore back --json` ignored its flag.
+  const idx = args.indexOf(flag);
+  if (idx === -1) return undefined;
+  const value = args[idx + 1];
+  args.splice(idx, value === undefined || value.startsWith("-") ? 1 : 2);
+  if (value === undefined || value.startsWith("-")) return "";
+  return value;
+}
+
+function renderHuman(caps: readonly Capability[], includeHead: boolean): void {
+  for (const cap of caps) {
+    const marker = cap.mutates ? "!" : " ";
+    console.log(`${marker} ${capabilityInvocation(cap)}`);
+    console.log(`    ${cap.summary}`);
+    if (cap.routes.length > 0) {
+      console.log(`    routes: ${cap.routes.map(r => `${r.method} ${r.path}`).join(", ")}`);
+    }
+    if (cap.flags.length > 0) {
+      console.log(`    flags:  ${cap.flags.map(f => f.name).join(" ")}`);
+    }
+  }
+  if (!includeHead) return;
+  for (const head of HEAD_CAPABILITIES) {
+    console.log(`  ocx ${head.invocations[0]}`);
+    console.log(`    ${head.summary}`);
+  }
+}
+
+export async function runCapabilities(argv: string[]): Promise<number> {
+  const args = [...argv];
+  const json = takeFlag(args, "--json");
+  const mutatingOnly = takeFlag(args, "--mutating-only");
+  const route = takeValueFlag(args, "--route");
+
+  if (route !== undefined && route.length === 0) {
+    console.error("Usage: ocx capabilities --route <path>");
+    return 64;
+  }
+
+  let selected: readonly Capability[] = route === undefined ? CAPABILITIES : capabilitiesForRoute(route);
+  if (mutatingOnly) selected = selected.filter(cap => cap.mutates);
+
+  if (route !== undefined && selected.length === 0) {
+    // An unmatched route is a real answer, not an error: the route may be exempt or may
+    // not exist. Say which, rather than exiting 0 with silence.
+    if (json) {
+      console.log(JSON.stringify({ schemaVersion: 1, route, capabilities: [] }, null, 2));
+    } else {
+      console.error(`No CLI capability drives ${route}.`);
+    }
+    return 4;
+  }
+
+  if (json) {
+    console.log(JSON.stringify({
+      schemaVersion: 1,
+      ...(route === undefined ? {} : { route }),
+      capabilities: selected.map(cap => ({
+        command: cap.command,
+        invocation: capabilityInvocation(cap),
+        summary: cap.summary,
+        routes: cap.routes,
+        flags: cap.flags,
+        mutates: cap.mutates,
+        json: cap.json,
+        ...(cap.details ? { details: cap.details } : {}),
+      })),
+      ...(route === undefined && !mutatingOnly ? { headCapabilities: HEAD_CAPABILITIES } : {}),
+    }, null, 2));
+    return 0;
+  }
+
+  renderHuman(selected, route === undefined && !mutatingOnly);
+  return 0;
+}